Ntos syscalls
#ServiceName379060006002760192009600
1NtAcceptConnectPort96969696971
2NtAccessCheck979797979898
3NtAccessCheckAndAuditAlarm383838383940
4NtAccessCheckByType989898989999
5NtAccessCheckByTypeAndAuditAlarm868686868788
6NtAccessCheckByTypeResultList99999999100100
7NtAccessCheckByTypeResultListAndAuditAlarm100100100100101101
8NtAccessCheckByTypeResultListAndAuditAlarmByHandle101101101101102102
9NtAddAtom686868686970
10NtAddBootEntry102103103102104104
11NtAddDriverEntry103104104103105105
12NtAdjustGroupsToken104105105104106106
13NtAdjustPrivilegesToken626262626364
14NtAlertResumeThread105106106105108108
15NtAlertThread106107107106109109
16NtAllocateLocallyUniqueId107108108107111111
17NtAllocateUserPhysicalPages108109109109113113
18NtAllocateUuids109110110110114114
19NtAllocateVirtualMemory212121212223
20NtApphelpCacheControl737373737475
21NtAreMappedFilesTheSame110132132132137137
22NtAssignProcessToJobObject111133133133138138
23NtCallbackReturn222234
24NtCancelDeviceWakeupRequest112134134
25NtCancelIoFile909090909192
26NtCancelTimer949494949596
27NtClearEvent595959596061
28NtClose121212121314
29NtCloseObjectAuditAlarm565656565758
30NtCompactKeys113142140139146147
31NtCompareTokens114143141140147148
32NtCompleteConnectPort115144142141148149
33NtCompressKey116145143142149150
34NtConnectPort117146144143150151
35NtContinue646464646566
36NtCreateDebugObject118147145144151152
37NtCreateDirectoryObject119148146145152153
38NtCreateEvent696969697071
39NtCreateEventPair120150148147155156
40NtCreateFile828282828384
41NtCreateIoCompletion121151149148157158
42NtCreateJobObject122152150149158159
43NtCreateJobSet123153151150159160
44NtCreateKey262626262728
45NtCreateKeyedEvent124155153152161162
46NtCreateMailslotFile125156154153163164
47NtCreateMutant126157155154164165
48NtCreateNamedPipeFile127158156155165166
49NtCreatePagingFile128159157156166167
50NtCreatePort129160158157167168
51NtCreateProcess130162160159169170
52NtCreateProcessEx747474747576
53NtCreateProfile131163161160170171
54NtCreateSection717171717273
55NtCreateSemaphore132165163163173174
56NtCreateSymbolicLinkObject133166164164174175
57NtCreateThread757575757677
58NtCreateTimer134168166166176177
59NtCreateToken135169167167177179
60NtCreateWaitablePort136173171171183185
61NtDebugActiveProcess137175173173186188
62NtDebugContinue138176174174187189
63NtDelayExecution494949495051
64NtDeleteAtom139177175175188190
65NtDeleteBootEntry140178176176189191
66NtDeleteDriverEntry141179177177190192
67NtDeleteFile142180178178191193
68NtDeleteKey143181179179192194
69NtDeleteObjectAuditAlarm144182180180193195
70NtDeleteValueKey145184182182195197
71NtDeviceIoControlFile444456
72NtDisplayString146185183184199201
73NtDuplicateObject575757575859
74NtDuplicateToken636363636465
75NtEnumerateBootEntries147186184187202204
76NtEnumerateDriverEntries148187185188203205
77NtEnumerateKey474747474849
78NtEnumerateSystemEnvironmentValuesEx149188186189204206
79NtEnumerateValueKey161616161718
80NtExtendSection150190188191206208
81NtFilterToken151191189192208210
82NtFindAtom171717171819
83NtFlushBuffersFile727272727374
84NtFlushInstructionCache152193191194212214
85NtFlushKey153194192195213215
86NtFlushVirtualMemory154196194197215217
87NtFlushWriteBuffer155197195198216218
88NtFreeUserPhysicalPages156198196199217219
89NtFreeVirtualMemory272727272829
90NtFsControlFile545454545556
91NtGetContextThread157201199202221224
92NtGetCurrentProcessorNumber158202200203222225
93NtGetDevicePowerState159203201204223226
94NtGetPlugPlayEvent160209207210
95NtGetWriteWatch161210208211229232
96NtImpersonateAnonymousToken162211209212230233
97NtImpersonateClientOfPort282828282930
98NtImpersonateThread163212210213231234
99NtInitializeRegistry164214212215233236
100NtInitiatePowerAction165215213216234237
101NtIsProcessInJob767676767778
102NtIsSystemResumeAutomatic166216214217235238
103NtListenPort167219216219237240
104NtLoadDriver168220217220238241
105NtLoadKey169221218221239242
106NtLoadKey2170222219222240243
107NtLoadKeyEx171223220223241244
108NtLockFile172224221224242245
109NtLockProductActivationKeys173225222225243246
110NtLockRegistryKey174226223226244247
111NtLockVirtualMemory175227224227245248
112NtMakePermanentObject176228225228246249
113NtMakeTemporaryObject177229226229247250
114NtMapUserPhysicalPages178231228231249252
115NtMapUserPhysicalPagesScatter000012
116NtMapViewOfSection373737373839
117NtModifyBootEntry179233229232250253
118NtModifyDriverEntry180234230233251254
119NtNotifyChangeDirectoryFile181235231234252255
120NtNotifyChangeKey182236232235253256
121NtNotifyChangeMultipleKeys183237233236254257
122NtOpenDirectoryObject858585858687
123NtOpenEvent616161616263
124NtOpenEventPair184239235239257260
125NtOpenFile484848484950
126NtOpenIoCompletion185240236240258261
127NtOpenJobObject186241237241259262
128NtOpenKey151515151617
129NtOpenKeyedEvent187243239245263266
130NtOpenMutant188244240246264267
131NtOpenObjectAuditAlarm189245241247265268
132NtOpenProcess353535353637
133NtOpenProcessToken190247243249267270
134NtOpenProcessTokenEx454545454647
135NtOpenSection525252525354
136NtOpenSemaphore191249245251269272
137NtOpenSymbolicLinkObject192251247253271274
138NtOpenThread193252248254272275
139NtOpenThreadToken333333333435
140NtOpenThreadTokenEx444444444546
141NtOpenTimer194253249255273276
142NtPlugPlayControl195256252258276279
143NtPowerInformation929292929394
144NtPrivilegeCheck196261257263281284
145NtPrivilegedServiceAuditAlarm198263259265283286
146NtPrivilegeObjectAuditAlarm197262258264282285
147NtProtectVirtualMemory777777777879
148NtPulseEvent199267262268286289
149NtQueryAttributesFile585858585960
150NtQueryBootEntryOrder200268263269287290
151NtQueryBootOptions201269264270288291
152NtQueryDebugFilterState202270265271289292
153NtQueryDefaultLocale181818181920
154NtQueryDefaultUILanguage656565656667
155NtQueryDirectoryFile505050505152
156NtQueryDirectoryObject203271266272290293
157NtQueryDriverEntryOrder204272267273291294
158NtQueryEaFile205273268274292295
159NtQueryEvent838383838485
160NtQueryFullAttributesFile206274269275293296
161NtQueryInformationAtom207275270276294297
162NtQueryInformationFile141414141516
163NtQueryInformationJobObject208277272278296299
164NtQueryInformationPort209278273279297300
165NtQueryInformationProcess222222222324
166NtQueryInformationThread343434343536
167NtQueryInformationToken303030303132
168NtQueryInstallUILanguage210283278284302305
169NtQueryIntervalProfile211284279285303306
170NtQueryIoCompletion212285280286304307
171NtQueryKey191919192021
172NtQueryMultipleValueKey213287282288306309
173NtQueryMutant214288283289307310
174NtQueryObject131313131415
175NtQueryOpenSubKeys215289284290308311
176NtQueryOpenSubKeysEx216290285291309312
177NtQueryPerformanceCounter464646464748
178NtQueryPortInformationProcess217291286292310313
179NtQueryQuotaInformationFile218292287293311314
180NtQuerySection787878787980
181NtQuerySecurityObject219293288295313316
182NtQuerySemaphore220294289296314317
183NtQuerySymbolicLinkObject221295290297315318
184NtQuerySystemEnvironmentValue222296291298316319
185NtQuerySystemEnvironmentValueEx223297292299317320
186NtQuerySystemInformation515151515253
187NtQueryTimer535353535455
188NtQueryTimerResolution224298293301319322
189NtQueryValueKey202020202122
190NtQueryVirtualMemory323232323334
191NtQueryVolumeInformationFile707070707172
192NtQueueApcThread666666666768
193NtRaiseException225299294303323326
194NtRaiseHardError226300295304324327
195NtReadFile333345
196NtReadFileScatter434343434445
197NtReadRequestData818181818283
198NtReadVirtualMemory606060606162
199NtRegisterThreadTerminatePort227306301310330333
200NtReleaseKeyedEvent228308303311331334
201NtReleaseMutant292929293031
202NtReleaseSemaphore777789
203NtRemoveIoCompletion666678
204NtRemoveProcessDebug229311306314334337
205NtRenameKey230312307315335338
206NtReplaceKey231313309317337340
207NtReplyPort99991011
208NtReplyWaitReceivePort8888910
209NtReplyWaitReceivePortEx404040404142
210NtReplyWaitReplyPort232314311319339342
211NtRequestDeviceWakeup233315312
212NtRequestPort234316313320340343
213NtRequestWaitReplyPort313131313233
214NtRequestWakeupLatency235317314
215NtResetEvent236318315321341344
216NtResetWriteWatch237319316322342345
217NtRestoreKey238320317323343346
218NtResumeProcess239321318324344347
219NtResumeThread797979798081
220NtSaveKey240327323329349352
221NtSaveKeyEx241328324330350353
222NtSaveMergedKeys242329325331351354
223NtSecureConnectPort243332326332352355
224NtSetBootEntryOrder244333327334354357
225NtSetBootOptions245334328335355358
226NtSetContextThread246335329336357360
227NtSetDebugFilterState247336330337358361
228NtSetDefaultHardErrorPort248337331338359362
229NtSetDefaultLocale249338332339360363
230NtSetDefaultUILanguage250339333340361364
231NtSetDriverEntryOrder251340334341362365
232NtSetEaFile252341335342363366
233NtSetEvent111111111213
234NtSetEventBoostPriority424242424344
235NtSetHighEventPair253342336343364367
236NtSetHighWaitLowEventPair254343337344365368
237NtSetInformationDebugObject255344338345367370
238NtSetInformationFile363636363738
239NtSetInformationJobObject256346340347369372
240NtSetInformationKey257347341348370373
241NtSetInformationObject898989899091
242NtSetInformationProcess252525252627
243NtSetInformationThread101010101112
244NtSetInformationToken258349343350372375
245NtSetIntervalProfile259353347354377380
246NtSetIoCompletion260354348355378381
247NtSetLdtEntries261355349357380383
248NtSetLowEventPair262356350358381384
249NtSetLowWaitHighEventPair263357351359382385
250NtSetQuotaInformationFile264358352360383386
251NtSetSecurityObject265359353361384387
252NtSetSystemEnvironmentValue266360354362385388
253NtSetSystemEnvironmentValueEx267361355363386389
254NtSetSystemInformation268362356364387390
255NtSetSystemPowerState269363357365388391
256NtSetSystemTime270364358366389392
257NtSetThreadExecutionState271365359367390393
258NtSetTimer959595959697
259NtSetTimerResolution272366360369392396
260NtSetUuidSeed273367361370393397
261NtSetValueKey939393939495
262NtSetVolumeInformationFile274368362371394398
263NtShutdownSystem275369363372395400
264NtSignalAndWaitForSingleObject276371365374397402
265NtStartProfile277373367376399404
266NtStopProfile278375368377400405
267NtSuspendProcess279376369378402407
268NtSuspendThread280377370379403408
269NtSystemDebugControl281378371380404409
270NtTerminateJobObject282379372381405410
271NtTerminateProcess414141414243
272NtTerminateThread808080808182
273NtTestAlert283380373382406411
274NtTraceEvent919191919293
275NtTranslateFilePath284384377386410415
276NtUnloadDriver285385378388412417
277NtUnloadKey286386379389413418
278NtUnloadKey2287387380390414419
279NtUnloadKeyEx288388381391415420
280NtUnlockFile289389382392416421
281NtUnlockVirtualMemory290390383393417422
282NtUnmapViewOfSection393939394041
283NtVdmControl291391384394421426
284NtWaitForDebugEvent292392385395423428
285NtWaitForKeyedEvent293393386396424429
286NtWaitForMultipleObjects888888888990
287NtWaitForMultipleObjects32232323232425
288NtWaitForSingleObject111123
289NtWaitHighEventPair294395388398427431
290NtWaitLowEventPair295396389399428432
291NtWriteFile555567
292NtWriteFileGather242424242526
293NtWriteRequestData848484848586
294NtWriteVirtualMemory555555555657
295NtYieldExecution676767676869
296NtAcquireCMFViewOwnership 102102
297NtAlpcAcceptConnectPort 111111111115115
298NtAlpcCancelMessage 112112112116116
299NtAlpcConnectPort 113113113117117
300NtAlpcCreatePort 114114114119119
301NtAlpcCreatePortSection 115115115120120
302NtAlpcCreateResourceReserve 116116116121121
303NtAlpcCreateSectionView 117117117122122
304NtAlpcCreateSecurityContext 118118118123123
305NtAlpcDeletePortSection 119119119124124
306NtAlpcDeleteResourceReserve 120120120125125
307NtAlpcDeleteSectionView 121121121126126
308NtAlpcDeleteSecurityContext 122122122127127
309NtAlpcDisconnectPort 123123123128128
310NtAlpcImpersonateClientOfPort 124124124129129
311NtAlpcOpenSenderProcess 125125125130130
312NtAlpcOpenSenderThread 126126126131131
313NtAlpcQueryInformation 127127127132132
314NtAlpcQueryInformationMessage 128128128133133
315NtAlpcRevokeSecurityContext 129129129134134
316NtAlpcSendWaitReceivePort 130130130135135
317NtAlpcSetInformation 131131131136136
318NtCancelIoFileEx 135135134140140
319NtCancelSynchronousIoFile 136136135141141
320NtClearAllSavepointsTransaction 137
321NtClearSavepointTransaction 138
322NtCommitComplete 139137136143144
323NtCommitEnlistment 140138137144145
324NtCommitTransaction 141139138145146
325NtCreateEnlistment 149147146154155
326NtCreateKeyTransacted 154152151160161
327NtCreatePrivateNamespace 161159158168169
328NtCreateResourceManager 164162162172173
329NtCreateThreadEx 167165165175176
330NtCreateTransaction 170168168179181
331NtCreateTransactionManager 171169169180182
332NtCreateUserProcess 172170170181183
333NtCreateWorkerFactory 174172172185187
334NtDeletePrivateNamespace 183181181194196
335NtEnumerateTransactionObject 189187190205207
336NtFlushInstallUILanguage 192190193211213
337NtFlushProcessWriteBuffers 195193196214216
338NtFreezeRegistry 199197200218220
339NtFreezeTransactions 200198201219221
340NtGetMUIRegistryInfo 204202205224227
341NtGetNextProcess 205203206225228
342NtGetNextThread 206204207226229
343NtGetNlsSectionPtr 207205208227230
344NtGetNotificationResourceManager 208206209228231
345NtInitializeNlsFiles 213211214232235
346NtIsUILanguageComitted 217215218236239
347NtListTransactions 218
348NtMapCMFModule 230227230248251
349NtMarshallTransaction 232
350NtOpenEnlistment 238234238256259
351NtOpenKeyTransacted 242238243261264
352NtOpenPrivateNamespace 246242248266269
353NtOpenResourceManager 248244250268271
354NtOpenSession 250246252270273
355NtOpenTransaction 254250256274277
356NtOpenTransactionManager 255251257275278
357NtPrepareComplete 259255261279282
358NtPrepareEnlistment 260256262280283
359NtPrePrepareComplete 257253259277280
360NtPrePrepareEnlistment 258254260278281
361NtPropagationComplete 264260266284287
362NtPropagationFailed 265261267285288
363NtPullTransaction 266
364NtQueryInformationEnlistment 276271277295298
365NtQueryInformationResourceManager 279274280298301
366NtQueryInformationTransaction 280275281299302
367NtQueryInformationTransactionManager 281276282300303
368NtQueryInformationWorkerFactory 282277283301304
369NtQueryLicenseValue 286281287305308
370NtReadOnlyEnlistment 301296305325328
371NtRecoverEnlistment 302297306326329
372NtRecoverResourceManager 303298307327330
373NtRecoverTransactionManager 304299308328331
374NtRegisterProtocolAddressInformation 305300309329332
375NtReleaseCMFViewOwnership 307302
376NtReleaseWorkerFactoryWorker 309304312332335
377NtRemoveIoCompletionEx 310305313333336
378NtRollbackComplete 322319325345348
379NtRollbackEnlistment 323320326346349
380NtRollbackSavepointTransaction 324
381NtRollbackTransaction 325321327347350
382NtRollforwardTransactionManager 326322328348351
383NtSavepointComplete 330
384NtSavepointTransaction 331
385NtSetInformationEnlistment 345339346368371
386NtSetInformationResourceManager 348342349371374
387NtSetInformationTransaction 350344351373376
388NtSetInformationTransactionManager 351345352374377
389NtSetInformationWorkerFactory 352346353376379
390NtShutdownWorkerFactory 370364373396401
391NtSinglePhaseReject 372366375398403
392NtStartTm 374
393NtThawRegistry 381374383407412
394NtThawTransactions 382375384408413
395NtTraceControl 383376385409414
396NtWaitForWorkViaWorkerFactory 394387397426430
397NtWorkerFactoryWorkerReady 39739040000
398NtRenameTransactionManager 308316336339
399NtReplacePartitionUnit 310318338341
400NtAllocateReserveObject 108112112
401NtCreateProfileEx 161171172
402NtDisableLastKnownGood 183198200
403NtDrawText 185200202
404NtEnableLastKnownGood 186201203
405NtNotifyChangeSession 237255258
406NtOpenKeyEx 242260263
407NtOpenKeyTransactedEx 244262265
408NtQuerySecurityAttributesToken 294312315
409NtQuerySystemInformationEx 300318321
410NtQueueApcThreadEx 302322325
411NtSerializeBoot 333353356
412NtSetIoCompletionEx 356379382
413NtSetTimerEx 368391395
414NtUmsThreadYield 387411416
415NtAddAtomEx 103103
416NtAdjustTokenClaimsAndDeviceGroups 107107
417NtAlertThreadByThreadId 110110
418NtAlpcConnectPortEx 118118
419NtAssociateWaitCompletionPacket 139139
420NtCancelWaitCompletionPacket 142143
421NtCreateDirectoryObjectEx 153154
422NtCreateIRTimer 156157
423NtCreateLowBoxToken 162163
424NtCreateTokenEx 178180
425NtCreateWaitCompletionPacket 182184
426NtCreateWnfStateName 184186
427NtDeleteWnfStateData 196198
428NtDeleteWnfStateName 197199
429NtFilterBootOption 207209
430NtFilterTokenEx 209211
431NtFlushBuffersFileEx 210212
432NtGetCachedSigningLevel 220222
433NtQueryWnfStateData 320323
434NtQueryWnfStateNameInformation 321324
435NtSetCachedSigningLevel 356359
436NtSetInformationVirtualMemory 375378
437NtSetIRTimer 366369
438NtSubscribeWnfStateChange 401406
439NtUnmapViewOfSectionEx 418423
440NtUnsubscribeWnfStateChange 419424
441NtUpdateWnfStateData 420425
442NtWaitForAlertByThreadId 422427
443NtWaitForWnfNotifications 425
444NtCancelTimer2 142
445NtCreateTimer2 178
446NtGetCompleteWnfStateSubscription 223
447NtSetTimer2 394
448NtSetWnfProcessNotificationEvent 399